CVE-2017-6206

CVE-2017-6206 Se ha descubierto que el firmware de la serie de switches Websmart DGS-1510 tiene vulnerabilidades de seguridad. Las vulnerabilidades incluyen bypass de comandos sin autenticación y divulgación de información sin autenticación. exploit.sh contiene el código PoC y creará un usuario...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 — TryHackMe Status: ✅ Completed Date: 30 May 2025 🎯 Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...

CVE-2024-57376

CVE-2024-57376 D-Link DSR-250 및 DSR-250N에 대한 인증 전 원격 코드 실행 익스플로잇 보안 권고: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 사용법 root@kitploit: $ python3 exploit.py usage: 예제 root@kitploit: $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250N year :...

tryhackme-moniker-link

tryhackme-moniker-link Documentation of my hands-on lab Moniker Link CVE-2024-21413 completed on TryHackMe. Moniker Link CVE-2024-21413 — TryHackMe Lab Overview This repository documents my hands-on study in a TryHackMe room. The goal of this exercise was to understand how the vulnerability works...

CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: root@kitploit: go build cve-2026-19900-PoC.go...

CVE-2021-37152

CVE-2021-37152 Эксплойт для доступа к сетевым клиентам путем отправки пакетов в беспроводных устройствах TP-LINK и подготовки к MITM-атаке Эксплойт Этот эксплойт предназначен для доступа и сканирования сетевых клиентов, и вы легко сможете получить доступ и подготовиться к MITM-атаке, эксплойт буд...

CVE-2026-80936

A flaw was found in the Linux kernel's mt7925 Wi-Fi driver. During multi-link power-save setup, the mlopmwork is queued with a delay but not properly cancelled when the device is stopped. This can lead to the work item attempting to access a deallocated workqueue, resulting in a kernel warning an...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80983

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays alive while the CDC slot is fetched: sockhold&smc-sk;...

CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

EUVD-2026-76311

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

This vulnerability affects the Linux kernel NTB (Non-Transparent Bridge) transport layer. The root cause is in ntb_transport_tx_enqueue(): when the QP link is down, the function returned 0 (indicating success) without consuming the submitted packet. Because the caller (ntb_netdev) treats a zero r...

CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80986

In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has maxrecvsge == 1 there is no shared v2 receive buffer, and smcllcsaveaddlinkrkeys takes the v2 extension from 44 bytes past the start of the...

CVE-2026-80983

CVE-2026-80983 is a socket reference count leak in the Linux kernel's SMC (Stream Mode Communication) networking module, specifically in the smc_switch_conns() function. The function calls sock_hold() before releasing lgr->conns_lock, but when smc_cdc_get_free_slot() fails (e.g., the target li...

CVE-2026-80936

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Cadena de explotación PoC dirigida al daemon de cliente DDNS cmxddnsd del TP-Link Omada ER605 cuando el dispositivo está configurado para usar el servicio Comexe DDNS. ⚠️ Legal / Ética : Est...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab This is an educational, reduced-scope reproduction Lab built based on the public vulnerability report GHSL-2023-142 for Home Assistant Companion for Android and the open-source structure of the vulnerable version 2023.8.2. It does not use a real Home...